EN
RedderOS status — RedderOS
// transparency

What is tested and what is not

We publish what we have checked, what is still missing and the order in which we will do it. If something is not listed as tested, do not take it for granted.

v0.3 self-test in QEMU

boots
4
failures
0
environment
QEMU
v0.3 self-test results
AreaWhat is checkedResult
GRUB · BIOSBoot via GRUB on legacy BIOS. Tor, firewall, lockdown, sysctl, blocked modules, AppArmor, root in RAM with no swap, no sudo, and TCP, DNS, UDP and ICMP leak tests.Passed
GRUB · UEFIThe same checks, booting via GRUB on UEFI (OVMF).Passed
Profiles · 1st bootThe vault and a profile are created, data is written to its /home and the disk is checked to reveal nothing: no LUKS or ext4 signatures, no name, no content.Passed
Profiles · 2nd bootAfter a restart, the system does not know the profile exists, a wrong passphrase gives the same error as a non-existent profile and the right one opens it with the data intact.Passed

The tests run in a virtual machine. They confirm that the ISO boots and that profiles survive a restart. They are no substitute for testing on real hardware.

Pending

Not yet checked:

  • pendingTor bootstrap on a real network (the self-test runs in QEMU).
  • pendingTests on real laptops with Secure Boot enabled.
  • pendingReal hardware drivers: the published ISO uses the virtual kernel (linux-image-virtual) and the QEMU self-test does not cover Wi-Fi or graphics on physical machines.
  • pendingDebian-based build.
  • pendingTime synchronisation without NTP.

Roadmap

  1. v0.1

    Prototype

    Done
    • 172 MB live ISO for amd64, BIOS and UEFI boot.
    • Tor or no network.
    • Zero-knowledge encrypted profiles.
    • Self-test in QEMU.
  2. v0.2

    Everyday use

    Done
    • Xfce desktop and optional text mode.
    • Custom login screen: amnesic session, open and create profiles.
    • Tor Browser on top of the system Tor.
    • obfs4 bridges for censored networks.
    • redder-wipe available without administrator rights.
  3. v0.3

    Applications

    Pending
    • Sandboxed applications.
    • Aegis and Noctcom.
  4. v1.0

    Trust

    Pending
    • Secure Boot with a Redder Labs key.
    • Reproducible builds.
    • Signed ISO.
    • External audit.

Source code

RedderOS is released under the GNU Affero General Public License v3.0 licence (AGPL-3.0).

View the repository